Added in permissions to the API